This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-42488 →
ALPINE-CVE-2026-42488
Some shadow paging errors paths will switch the page-tables without updating the currently running vCPU reference. This causes a mismatch between the...
Original description
The description as published by the source.
Some shadow paging errors paths will switch the page-tables without
updating the currently running vCPU reference. This causes a mismatch
between the loaded page-tables and the mapcache metadata which can lead
to corruption of the mapcache.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Alpine:v3.20
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.5-r9"}]}]
Alpine:v3.21
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.5-r4"}]}]
Alpine:v3.22
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3-r4"}]}]
Alpine:v3.23
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3-r4"}]}]
Alpine:v3.24
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.1-r6"}]}]
References
- advisory security.alpinelinux.org